General

  • Target

    38863298e914053d9fcdb3af4087d059

  • Size

    1.4MB

  • MD5

    38863298e914053d9fcdb3af4087d059

  • SHA1

    8fb1d2c7065e880c325d49dcdda7350531846485

  • SHA256

    32d346d89b91d4bfb3a1a98c3734db97fe7e39d4fc7f4800d3be032088e46343

  • SHA512

    e34b4fa93cb614a27d2828134c68b00a8286e025787a45b4769e3a4cccbba07001f7bba5e65993c1a5b9bee6ee5b2214a55df54c3e1c94ef61533ab099cad31f

  • SSDEEP

    24576:hLk1UbRcCev8jVhpC4eM2+MYzXR0DNvguQoOCsbFPpsW13WbiL/g:h4KxeeO4R+DRgTNBpv1G+k

Score
7/10

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 38863298e914053d9fcdb3af4087d059
    .rar
  • bnbz.tk/bnbz.tk.url
  • bnbz.tk/xtw.dll
    .dll windows:4 windows x86 arch:x86

    e1ce7383ccb4ae0e9a1f9f270969a699


    Headers

    Imports

    Exports

    Sections

  • bnbz.tk/xtw.exe
    .exe windows:4 windows x86 arch:x86

    4ce46efed230bca6aae0343d11e054fd


    Headers

    Imports

    Sections

  • bnbz.tk/xtw.od
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections